Support for server session cache.

net/socket/ssl_server_socket_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.

[davidben, 2016/01/22 23:57:48]

[This implementation completely violates the interface, but we should resolve
that separately by just removing this file. crbug.com/580686.]

[ryanchung, 2016/01/29 23:28:15]

Ok.

 
 #include "net/socket/ssl_server_socket_nss.h"
 
 #include <utility>
 
 #if defined(OS_WIN)
 #include <winsock2.h>
 #endif
 
 #if defined(USE_SYSTEM_SSL)
@@ skipping 56 matching lines @@
     SSL_ShutdownServerSessionIDCache();
     g_nss_server_sockets_init = false;
   }
 };
 
 static base::LazyInstance<NSSSSLServerInitSingleton>::Leaky
     g_nss_ssl_server_init_singleton = LAZY_INSTANCE_INITIALIZER;
 
 }  // namespace
 
+scoped_ptr<SSLServerSocketContext> CreateSSLServerSocketContext(
+    X509Certificate* certificate,
+    crypto::RSAPrivateKey* key,

[davidben, 2016/01/22 23:57:48]

I don't think this compiles. It doesn't match the header.

[ryanchung, 2016/01/29 23:28:15]

Done.

+    const SSLServerConfig& ssl_server_config) {
+  return new SSLServerSocketContextNSS(certificate, key, ssl_server_config);
+}
+
 void EnableSSLServerSockets() {
   g_nss_ssl_server_init_singleton.Get();
 }
 
-scoped_ptr<SSLServerSocket> CreateSSLServerSocket(
-    scoped_ptr<StreamSocket> socket,
-    X509Certificate* certificate,
+SSLServerSocketContextNSS::SSLServerSocketContextNSS(
+    scoped_refptr<X509Certificate> certificate,

[davidben, 2016/01/22 23:57:48]

Nit: Unnecessary bouncing on reference counts. X509Certificate*?

[ryanchung, 2016/01/29 23:28:15]

Done.

     const crypto::RSAPrivateKey& key,
-    const SSLServerConfig& ssl_server_config) {
+    const SSLServerConfig& ssl_server_config)
+    : ssl_server_config_(ssl_server_config),
+      cert_(certificate),
+      key_(key.Copy()) {
+  CHECK(key_);
+}
+
+SSLServerSocketContextNSS::~SSLServerSocketContextNSS() {}
+
+scoped_ptr<SSLServerSocket> SSLServerSocketContextNSS::CreateSSLServerSocket(
+    scoped_ptr<StreamSocket> socket) {
   DCHECK(g_nss_server_sockets_init) << "EnableSSLServerSockets() has not been"
                                     << " called yet!";
 
   return scoped_ptr<SSLServerSocket>(new SSLServerSocketNSS(
-      std::move(socket), certificate, key, ssl_server_config));
+      std::move(socket), cert_.get(), *key_, ssl_server_config_));
 }
 
 SSLServerSocketNSS::SSLServerSocketNSS(
     scoped_ptr<StreamSocket> transport_socket,
     scoped_refptr<X509Certificate> cert,
     const crypto::RSAPrivateKey& key,
     const SSLServerConfig& ssl_server_config)
     : transport_send_busy_(false),
       transport_recv_busy_(false),
       user_read_buf_len_(0),
@@ skipping 743 matching lines @@
   // initializes the NSS base library.
   EnsureNSSSSLInit();
   if (!NSS_IsInitialized())
     return ERR_UNEXPECTED;
 
   EnableSSLServerSockets();
   return OK;
 }
 
 }  // namespace net